In the Linux kernel, the following vulnerability has been resolved:
usb: aqc111: check packet for fixup for true limit
If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value.
The driver will then proceed to parse the header located at that position, which will either oops or process some random value.
The fix is to check against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the driver.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-preemptUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extra | Jun 12, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-lowlatencyUpgrade linux-nvidia-6.5Upgrade linux-hwe-5.4Upgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-azure-fde-5.15Upgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-iotUpgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-gkeop-5.15Upgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-azure-fdeUpgrade linux-gkeopUpgrade linux-ibm-5.15Upgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-bluefield | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub